Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
-1
votes
0answers
17 views

Hello. My chrome browser shows grey squares or rectangles when scrolling

This is not related to videocard as I have thought before -- some html elements are above these squares. They are approx. 254x254px. I have them in chrome. Sometime squares appear in brave browser but ...
1
vote
1answer
43 views

Does a lack of verified signatures for Windows Defender indicate malware?

I ran "autoruns" from Windows Sysinternals on a Windows 10 machine, and noticed that the Windows Defender services were marked in red colour, and did not have verified signatures. I checked these ...
1
vote
3answers
60 views

Is there a option to protect a USB stick from being infected other than flash drives with hardware protection?

I would like to protect my flash drives to being infected when I put it in another computers or devices. After some research, I found that I will not be able to reach this level of protection by using ...
1
vote
1answer
43 views

Can any tools/tactics produce a higher confidence in a clean system than Microsoft Security Scanner?

In the process of trying to recover data in bulk from what I assumed was a failing hard drive, Windows Security kindly notified me it had found a handful of malicious items among the recovered files. ...
0
votes
2answers
61 views

How to safely connect a possibly infected computer to my home's internet? [duplicate]

There is a laptop - not mine, someone else's. That someone else, as far as I know them, are a bit lousy in their security best practices (do they even have AV installed? not to mention OS patches or ...
63
votes
6answers
15k views

Can malicious code fit in 14 bytes?

I was reading this The New York Times (NYT) article about the hack of Jeff Bezos's phone. The article states: The May 2018 message that contained the innocuous-seeming video file, with a tiny 14-...
0
votes
2answers
53 views

Protective steps to prevent files sent through WhatsApp from installing malware

I have been reading articles about exploits which allows someone to send an MP4, PDF or other file type through WhatsApp or other service, which self-executes to install malware without any user click ...
0
votes
1answer
49 views

Are automated steganalysis tools commonly used in malware analysis?

I want to know whether or not it is useful to a malware researcher or AV product to use steganalysis tools to detect or study malware. If so, is there a standard steganalysis tool that's generally ...
0
votes
0answers
93 views

Is it possible to package all data on a user's phone and send it to the attacker? [closed]

I'm working on a school project. Is it possible to embed malware in an application? What I have in mind is to clone all the user files and send them to a db or somewhere else. I would also prefer if ...
4
votes
4answers
286 views

How dangerous can a file be with no detected malware?

Let's say there is file which successfully passed all scans by all antivirus software there is on VirusTotal. Does it mean that it can't be dangerous. If no, what kind of dangers we can expect?
0
votes
1answer
64 views

Bypassing Windows Defender VBA custom code

I've recently written a simple keylogger using classic DLL-injection technique. I wanted to simulate a real phishing attack where the user opens an Office document with macros and by enabling them he ...
1
vote
1answer
99 views

Is there any danger to downloading a malware binary, but not executing it?

I recently downloaded an ELF file which was discovered from an exploit attempt (wget to download this binary failed due to outgoing traffic being blocked if it isn't whitelisted). I downloaded it into ...
0
votes
1answer
73 views

Show confirmation popup before running any downloaded program in Windows 10

I often download files either using my browser or by torrenting. Few times, I encountered an attack where the torrented file was called something like movie.mp4.lnk and the target was set to run a ...
1
vote
1answer
81 views

Is an encrypted hard drive immune from malware if it is not mounted when using a LiveCD?

As a follow-up to the question in The DMZ, is an encrypted drive (full disk encrypted e.g. LUKS, BitLocker) protected against malware if it is not mounted when using a LiveCD? The use case is that ...
0
votes
1answer
189 views

Strange HTTP request from binaryedge.ninja

I found the following strange HTTP request apparently emanating from binaryedge.ninja: min-li-ustx-12-13-65991-x-prod.binaryedge.ninja - - [05/Jan/2020:07:18:48 -0500] "GET / HTTP/1.0" 302 212 "-" "-...
-1
votes
1answer
127 views

How a virus injects itself to another machine's file?

Everyone says a computer virus replicates/attaches itself to another host file. This concept is not clear to me. I have read many articles but unable to understand how. Say, virus V1 is the original ...
65
votes
5answers
14k views

My email address is being used to enroll for online services. Should I be concerned?

Just before Christmas I received the following message in one of my GMail accounts: Sign-in attempt was blocked ********@gmail.com [redacted by me] Someone just used your password to try to ...
0
votes
1answer
88 views

Used laptop with potential BIOS/SSD firmware malware

I bought a used laptop and I'm concerned about the integrity of the firmware on the hardware and bios. I realize these types of malware are very rare. 1) My question is that if I assume that the BIOS ...
2
votes
1answer
68 views

Wannacry testing in lab - Not getting SMB scan attempts

So I booted up two windows 7 64bit sp1 versions in virtualbox and shared their network and the operating systems are vulnerable to the SMB exploit that the wannacry ransomware is using. The Issue is ...
0
votes
0answers
54 views

Can an already downloaded malicious file detect the operating system?

A similar question has been asked here: Can hackers detect my operating system? My question is, if malicious file has been downloaded off of a secure 3rd party website (i.e. not owned/controlled by ...
2
votes
0answers
104 views

How did Stuxnet prevent the user from seeing the malicious files on a USB stick?

From what I can tell there were two main TMP files present on the infected USB stick. The smaller of the two would run first and hook various functions related to viewing files so as to hide the LNK ...
0
votes
1answer
119 views

Are cell towers basically routers? If so, could one be hacked to spread malware to all connected devices?

Just listened to a bit of the Darknet Diaries podcast episode on NotPetya. It’s insane just the damage it was able to cause even if it was only able to infect one machine initially. Which got me ...
1
vote
1answer
184 views

Possible to decode md5 hash of a malicious URL?

Context: I had a virus on my WordPress website server that injected itself into every functions.php file on the server across two different sites. After removing the heavily obfuscated virus code I ...
0
votes
1answer
58 views

.NET application protection technique against cracking

I'm trying to protect my software against cracking. Protection against cracking is crucial before listing the product on market. Info about the software: Built using .NET C# (Framework 4.5.2) ...
1
vote
3answers
151 views

If we integrate CDR in our email solution, do we really need Sandbox as well?

In the case of social engineering attack vector is an email sent with a malicious attachment like XSL file, I am not really understanding where we will need Sandbox solution if we can just use CDR (...
0
votes
1answer
142 views

DNS Tunnel or Not (g01.msn.com)

Thought I found DNS tunneling and but after a closer look it seems a bit more complex. Anyone seen this traffic before? User starts their computer, launches firefox.exe, then they hit c.msn.com ...
0
votes
1answer
100 views

Is ZIP-attack possible/realistic? [duplicate]

I was recently visiting a semi-popular website by just typing the link into the browser. I actually was sure that I typed the right address in there. But what if I typed in the wrong address and then ...
0
votes
0answers
65 views

Spying apps: Android mic and camera access

Can android lollipop 5.1.1 apps which have permission to access mic and camera access them when the app is not running? I woke up to the news by the NYT that a popular app I had previously downloaded ...
1
vote
0answers
39 views

Getting more information about a process using mobile data

I have a process running named 10183 that occasionally uses mobile data, how do I get more information about it, like know what system application is running under that name, what does it do, and if ...
0
votes
2answers
143 views

Is it risky to download but not use a zip file?

Is there any possibility of malware infection in Windows 10 for the following three situations: When you download a zipped file, but do not use it (you do not open it)? When you only open a zipped ...
0
votes
1answer
136 views

Wordpress wp-config file seems hacked and changed to DB_NAME and DB_USER asadmin_drr and DB_HOST as 46.21.253.40

I have a shared hosting on hostgator with around wordpress based websites. Out of them 4 stopped working with message as error establishing database connection. On checking the wp-config i found the ...
-1
votes
1answer
105 views

Is Go good for malware programming [closed]

I read that Golang was used to create malware. Is it good? Will it stay undetected? What will be its performance?
1
vote
0answers
69 views

Google security warning on rclone

I am setting up some new configurations with rclone to backup stuff to google drive. I am configuring application with the steps on https://rclone.org/drive/#making-your-own-client-id When I am going ...
1
vote
1answer
122 views

How Concerned should I be about VM Escapes?

I intend to start learning how to do malware analysis and forensics, but I have a concern or two. I want to start by just analysing code that I write myself, and that'll be fine. But at some point I'...
0
votes
1answer
137 views

Someone is logging into my webserver [duplicate]

For a week someone has been logging into my webserver. Yesterday I mentioned this to the hosting company. They tell me to use an "IP blocker". I am doing that, but today I looked for more logins. The ...
0
votes
1answer
90 views

How to identify malicious Wordpress user agents

I have noticed our website, which is Wordpress based, gets frequent daily requests from other sites where the user agent is Wordpress and the other site is obviously an already hacked Wordpress ...
0
votes
3answers
173 views

ret2libc - why need 4 bytes of garbage

So I started to learn reverse engineering, and I came across the ret2libc exploit. I tried to understand how it works and I got a bit confused. They say that when you return to the address of system ...
5
votes
1answer
221 views

Can a virus that's in a file stream infect a computer?

I have a java web application that accepts base64 image strings from users. These strings are first converted to a byte stream after which the stream is scanned for viruses. After that the file is ...
1
vote
2answers
156 views

What is the term for adding benign code/behavior to malware to evade antiviruses?

Some malware authors add benign code/behavior to their malware just to throw off antiviruses and IDSs which employ machine learning to detect malware. There is a name for this technique (and even a ...
1
vote
0answers
83 views

Passively read key from process memory without invoking kernel (windows 10)

I have a process that loads into memory like any other process. It contains a special key. Our goal is to read this key inside memory...or while it is in transit across the data bus from cpu. The ...
0
votes
0answers
35 views

Keeping devices secure on a WIFI network [duplicate]

I am using a public WIFI network before work how do i keep my devices secure on this network? I am looking to prevent a attacker using a packet sniffer to grab my data and i am looking to prevent ...
29
votes
5answers
3k views

How to verify if router firmware is legitimate

I have read that router firmware is supposed to be patched. How do I verify that the firmware update is indeed a unmodified version of the firmware? I know about signature checking, but how would I ...
1
vote
0answers
42 views

How attackers bypass windows smart screen [closed]

I'm curious to how attackers gain access to valid EV certificates that bypass windows smart screen (for malware delivery/execution) or how they sign these malicious software(s) without access to EV ...
0
votes
0answers
22 views

I found this code in my wp-content/uploads/woocommerce_uploads/wp-user-new.php [duplicate]

<?php function Gljng($ZOege, $INLWC = '') { $X_6Nm = $ZOege; $v9BZR = ''; for ($hfEHR = 0; $hfEHR < strlen($X_6Nm);) { for ($SsuGo = 0; $SsuGo < strlen($INLWC) && $hfEHR < ...
0
votes
1answer
85 views

How to protect users from malware utilizing protocols such as DNS over HTTPS?

With the increased drive to enable DNS over HTTPS (DoH), it's likely that non-browser applications and systems may utilize DoH services other than those promoted by Mozilla and Google. Since malware ...
1
vote
1answer
71 views

Is a VPN and Virtual Machine secure enough for running programs that might include malware [duplicate]

I am trying to start a business online but don't want viruses from any sketchy software that I will be downloading. I will be using a VM and a VPN but was wondering if I needed any other software so ...
0
votes
4answers
147 views

Can a website be used for targeted attacks?

I asked a question before about how you can tell that a website is safe to visit (to prevent yourself from getting hacked) and I was told that it can not be done. A virus scan with virustotal will not ...
3
votes
1answer
88 views

Is there an alternative to using hashing to identify malware?

I'm reading a sans paper on IOCs (indicators of compromise) in malware forensics and I came across this interesting obstacle: polymorphic and metamorphic codes (Paxson, 2011) result in multiple ...
7
votes
3answers
369 views

Browser setups to stay safe from malware and unwanted stuff

I have to set up a browser to surf the internet. I'm trying to stay safe from malware as much as possible. (I already know that there's no way to stay 100% safe.) My idea is to use Firefox with these ...
1
vote
0answers
66 views

Bought used IP security camera, should I reflash the firmware?

I bought an used IP security camera on eBay, I dont know who was the previous owner. I've always thought that we can't trust 100% any firmwares/OSes that were been installed or used by someone else. ...